Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa
File: 795bae65-e494-4497-8c64-6c78c5a4b388.roa (raw, json)
Hash identifier: +hvYvoD9VswjauZ2kvSg4AL2oe2MbVybtc3ZQVyji3g=
Subject key identifier: 56:2C:F3:42:E6:96:85:90:68:A5:36:B7:8F:AE:0C:46:15:43:2F:48
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 49279D5E4C6573019ACEDF4FBCD556C7AF274DE5
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa
Signing time: Tue 17 Jun 2025 00:50:59 +0000
ROA not before: Tue 17 Jun 2025 00:50:59 +0000
ROA not after: Tue 22 Jul 2025 23:59:59 +0000
asID: 16509
IP address blocks: 51.0.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:27:9d:5e:4c:65:73:01:9a:ce:df:4f:bc:d5:56:c7:af:27:4d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Jun 17 00:50:59 2025 GMT
Not After : Jul 22 23:59:59 2025 GMT
Subject: serialNumber=abcdab224d0bcd4e090ece4c3a30e65d70db1be13ad7ccf08dfc3830a776d91c, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:dd:ec:28:b9:4d:86:99:8f:ad:2b:70:d9:
bb:46:20:c7:6e:1c:d2:9e:f3:16:f1:23:1b:bf:5c:
9e:9e:41:ee:3e:5e:85:a4:97:fc:40:40:5c:15:18:
e6:21:03:21:0d:06:a0:e4:1b:fd:35:18:bf:99:63:
0c:d8:b7:d1:05:48:18:e8:d6:6e:98:95:92:55:d4:
dc:93:d9:22:39:d5:65:f8:0f:dc:19:6f:6b:83:fd:
a3:97:ac:b7:2d:99:03:7a:de:10:41:51:6c:09:45:
ab:72:8e:f7:5f:09:f9:7e:0c:45:a9:b5:0d:a9:49:
7f:ae:05:47:a4:fe:d1:65:f4:a9:02:cb:d3:f5:da:
4f:10:9f:b9:28:64:ea:03:fd:24:a4:93:29:45:9e:
47:c8:b1:ed:d2:5b:42:68:37:dd:d0:f8:ff:f6:6b:
54:57:12:62:a5:e4:b2:60:b2:81:3a:5f:a9:21:48:
44:2c:6a:fa:67:46:9b:95:f7:a8:61:ab:12:e6:fe:
aa:17:30:c9:1b:c1:ae:10:37:d3:c1:8d:ed:33:04:
d8:f9:5d:f5:c5:6a:51:22:ad:2c:e6:59:e5:ff:b5:
62:0f:db:72:3d:60:4f:47:89:ba:ab:bf:a1:c5:95:
07:3f:e5:a4:5d:4f:ac:c6:e7:7e:dd:ef:22:0d:9a:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:F3:42:E6:96:85:90:68:A5:36:B7:8F:AE:0C:46:15:43:2F:48
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/795bae65-e494-4497-8c64-6c78c5a4b388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.0.104.0/21
Signature Algorithm: sha256WithRSAEncryption
33:ec:a4:a4:4d:a1:45:38:6e:ad:f4:f9:70:cb:bd:66:28:06:
ca:8d:96:55:f2:8d:11:a7:18:e0:89:a8:c3:d2:f7:05:ea:cd:
a5:94:41:1c:50:35:e7:0e:44:17:f9:d4:9f:e1:a1:c5:86:97:
1b:cd:af:f8:1b:36:de:b3:70:eb:d7:be:a7:5d:3a:73:30:6e:
25:87:92:00:0a:50:d7:81:d0:25:67:be:d3:d6:e9:cf:61:5b:
e2:f0:f4:a9:9b:5f:f1:c0:32:33:ce:28:6e:b3:7e:d4:66:17:
e5:82:3e:8d:fd:09:5d:36:e6:4a:96:68:ab:d6:a4:59:c5:ee:
5d:fd:57:3b:66:11:fe:d7:b7:d0:79:ac:69:8e:10:c0:b5:8a:
d3:d6:7c:ff:46:8e:4e:49:2e:64:ca:b4:b7:9a:d0:9b:26:b7:
aa:a2:b2:b2:3f:3f:3a:1d:08:03:d1:a3:02:4f:54:3e:62:bd:
1d:24:07:04:22:b6:a8:b1:f7:3c:d1:a5:73:a3:d6:7c:06:19:
4c:38:38:d7:fb:4c:fc:23:25:45:94:4e:79:e1:70:b9:37:27:
92:c0:32:a0:07:f2:ea:d8:2a:b6:10:50:4f:20:92:7d:9f:62:
78:40:85:d0:be:ca:ac:83:dd:ee:78:0a:dd:7b:f0:2a:39:ae:
c8:6f:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:22 2025 by rpki-client